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AMENDMENTS TO THE CLAIMS 

There are no amendments to the Claims. The pending Claims are reproduced here for the 
convenience of the Examiner. 


Claims 1 - 28 (canceled). 

29. (Previously Presented) A method for assisting a user in verifying a cast ballot Beast stored in a 
server, the method comprising: 

forming a digital signature of Beast using a private key of the server DS(Bcast, s); 

associating the Beast and DS(Bcast, s) with a vote serial number VSN; 

forming a confirmation token, comprising DS(Bcast, s) and VSN; 

making the confirmation_token available to a user; 

receiving a confirmation token made available to a user; 

extracting VSHeceived token and DSreceived token(Bcast, s) from the received token; and 
for VSN equal to VSHeceived token, comparing DSreceived token(Bcast, s) and at least one of 

DS(Bcast, s) and DS(Bcast, S); 
if the comparison shows equivalence between the data compared, determining that Beast is 

verified. 


30. (Previously Presented) The method of Claim 29 wherein: 

the confirmation token further comprises a digital signature of an aggregation comprising 

the associated Beast and VSN using the server's private key DS( Aggregation, s), 
extracting DSreceived token (Aggregation, s) from the received token; and 
Beast is verified only upon the additional condition that DSreceived token (Aggregation, s) is 

equivalent to DS(Aggregation, s). 
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31. (Previously Presented) A method for assisting a user in verifying a cast ballot recorded in a 
server, the method comprising: 

receiving in a server at least one set of: 
a cast ballot Beast and 

a digital signature of Beast formed with the private key of a voter casting the ballot 

DS(Beast, V); 

forming: 

a digital signature of Beast using a private key of the server DS(Beast, s), 
associating Beast, DS(Beast, v), and DS(Bcast, s) v^ith a vote serial number VSN; 

forming a confirmation token, comprising: 

DS(Beast, s), DS(Bcast, v), VSN, and DS(Aggregation, s), 
where DS(Aggregation, s) is the digital signature of the aggregation of the 
associated Beast, DS(Beast, v), DS(Bcast, s), and VSN; 

making the confirmation token available to a user; 

receiving a confirmation token 

extracting VSNreceived token and at least one of DSreceivedtoken(Bcast, s), DSreceived token(Bcast, v), 

and DSreceived token(AG, s) from the received token; and 
for VSNreceived token and the corresponding VSN, comparing at least one of: 

DSreceived token(Bcast? s) and DS(Bcast5 S); 
DSreceived token(Bcast, v), and DS(Bcast, v); 

DSreceived token(Aggregation, s), and DS(Aggregation, s); 
if comparison shows equivalence between the data compared, determining that Beast is 
verified. 


32. (Previously Presented) The method of Claim 31 further comprising: 

if comparison shows equivalence between DSreceived token(Aggregation, s), and 

DS(Aggregation, s), determining that the received confirmation token has not 
been modified since its formation. 
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33. (Previously Presented) A method for assisting a user verifying a cast ballot recorded in a 
server, the method comprising: 

receiving a cast ballot ("Beast") in a server; 

forming a digital signature of Beast using a private key of the server ("DS(Beast , s)"), 
associating Beast and DS(Bcast , s) v^ith a vote serial number ("VSN"); 
for VSN, comparing DS(Bcast , s) and DS(Bcast , S), 

if comparison shows equivalence between the data compared, determining that Beast is 
verified. 
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